CVE-2017-11696
CVE-2017-11696
Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.
Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.
CVSS 7.8 · Élevée · EPSS 0,7%
- Publication
- Mise à jour
Pile logicielle: system
Produits et versions concernés
n/a
- Versions du logiciel
- n/a: Concernée
Aucun correctif publié
nss Debian:12
- Versions du logiciel
- 2:3.100-1
- 2:3.101-1
- 2:3.102-1
- 2:3.103-1
- 2:3.105-1
- 2:3.105-2
- 2:3.106-1
- 2:3.107-1
- 2:3.108-1
- 2:3.109-1
- 2:3.110-1
- 2:3.111-1
- 2:3.112-1
- 2:3.114-1
- 2:3.116-1
- 2:3.117-1
- 2:3.119-1
- 2:3.120-1
- 2:3.121-1
- 2:3.123-1
- 2:3.123.1-1
- 2:3.124-1
- 2:3.126-1
- 2:3.127-1
- 2:3.87.1-1
- 2:3.87.1-1+deb12u1
- 2:3.87.1-1+deb12u2
- 2:3.87.1-1+deb12u3
- 2:3.87.1-1+deb12u4
- 2:3.87.1-1+x32
- 2:3.89-1
- 2:3.89-2
- 2:3.90-1
- 2:3.90-2
- 2:3.90-3
- 2:3.91-1
- 2:3.92-1
- 2:3.93-1
- 2:3.94-1
- 2:3.95-1
- 2:3.96.1-1
- 2:3.98-1
- 2:3.99-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
nss Debian:13
- Versions du logiciel
- 2:3.110-1
- 2:3.110-1+deb13u1
- 2:3.110-1+deb13u2
- 2:3.110-1+deb13u3
- 2:3.110-1+deb13u4
- 2:3.111-1
- 2:3.112-1
- 2:3.114-1
- 2:3.116-1
- 2:3.117-1
- 2:3.119-1
- 2:3.120-1
- 2:3.121-1
- 2:3.123-1
- 2:3.123.1-1
- 2:3.124-1
- 2:3.126-1
- 2:3.127-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
nss Debian:14
- Versions du logiciel
- 2:3.110-1
- 2:3.111-1
- 2:3.112-1
- 2:3.114-1
- 2:3.116-1
- 2:3.117-1
- 2:3.119-1
- 2:3.120-1
- 2:3.121-1
- 2:3.123-1
- 2:3.123.1-1
- 2:3.124-1
- 2:3.126-1
- 2:3.127-1
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
nss Ubuntu:Pro:14.04:LTS
- Versions du logiciel
- 2:3.15.1-1ubuntu1
- 2:3.15.2-1
- 2:3.15.3-1
- 2:3.15.3.1-1
- 2:3.15.3.1-1.1
- 2:3.15.3.1-1.1ubuntu1
- 2:3.15.4-1ubuntu3
- 2:3.15.4-1ubuntu4
- 2:3.15.4-1ubuntu5
- 2:3.15.4-1ubuntu6
- 2:3.15.4-1ubuntu7
- 2:3.15.4-1ubuntu7.1
- 2:3.17-0ubuntu0.14.04.1
- 2:3.17.1-0ubuntu0.14.04.1
- 2:3.17.1-0ubuntu0.14.04.2
- 2:3.17.4-0ubuntu0.14.04.1
- 2:3.19.2-0ubuntu0.14.04.1
- 2:3.19.2.1-0ubuntu0.14.04.1
- 2:3.19.2.1-0ubuntu0.14.04.2
- 2:3.21-0ubuntu0.14.04.1
- 2:3.21-0ubuntu0.14.04.2
- 2:3.23-0ubuntu0.14.04.1
- 2:3.26.2-0ubuntu0.14.04.3
- 2:3.28.4-0ubuntu0.14.04.1
- 2:3.28.4-0ubuntu0.14.04.2
- 2:3.28.4-0ubuntu0.14.04.3
- 2:3.28.4-0ubuntu0.14.04.4
- 2:3.28.4-0ubuntu0.14.04.5
- 2:3.28.4-0ubuntu0.14.04.5+esm1
- 2:3.28.4-0ubuntu0.14.04.5+esm2
- 2:3.28.4-0ubuntu0.14.04.5+esm3
- 2:3.28.4-0ubuntu0.14.04.5+esm4
- 2:3.28.4-0ubuntu0.14.04.5+esm5
- 2:3.28.4-0ubuntu0.14.04.5+esm6
- 2:3.28.4-0ubuntu0.14.04.5+esm7
- 2:3.28.4-0ubuntu0.14.04.5+esm8
- 2:3.28.4-0ubuntu0.14.04.5+esm9
- 2:3.28.4-0ubuntu0.14.04.5+esm10
- 2:3.28.4-0ubuntu0.14.04.5+esm11
- 2:3.28.4-0ubuntu0.14.04.5+esm12
- 2:3.28.4-0ubuntu0.14.04.5+esm13
- 2:3.28.4-0ubuntu0.14.04.5+esm14
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
nss Ubuntu:Pro:16.04:LTS
- Versions du logiciel
- 2:3.19.2-1ubuntu1
- 2:3.19.2.1-0ubuntu1
- 2:3.21-1ubuntu2
- 2:3.21-1ubuntu3
- 2:3.21-1ubuntu4
- 2:3.23-0ubuntu0.16.04.1
- 2:3.26.2-0ubuntu0.16.04.2
- 2:3.28.4-0ubuntu0.16.04.1
- 2:3.28.4-0ubuntu0.16.04.2
- 2:3.28.4-0ubuntu0.16.04.3
- 2:3.28.4-0ubuntu0.16.04.4
- 2:3.28.4-0ubuntu0.16.04.5
- 2:3.28.4-0ubuntu0.16.04.6
- 2:3.28.4-0ubuntu0.16.04.8
- 2:3.28.4-0ubuntu0.16.04.9
- 2:3.28.4-0ubuntu0.16.04.10
- 2:3.28.4-0ubuntu0.16.04.11
- 2:3.28.4-0ubuntu0.16.04.12
- 2:3.28.4-0ubuntu0.16.04.13
- 2:3.28.4-0ubuntu0.16.04.14
- 2:3.28.4-0ubuntu0.16.04.14+esm1
- 2:3.28.4-0ubuntu0.16.04.14+esm2
- 2:3.28.4-0ubuntu0.16.04.14+esm3
- 2:3.28.4-0ubuntu0.16.04.14+esm4
- 2:3.28.4-0ubuntu0.16.04.14+esm5
- 2:3.28.4-0ubuntu0.16.04.14+esm6
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
nss Ubuntu:Pro:18.04:LTS
- Versions du logiciel
- 2:3.32-1ubuntu3
- 2:3.34-1ubuntu1
- 2:3.35-2ubuntu2
- 2:3.35-2ubuntu2.1
- 2:3.35-2ubuntu2.2
- 2:3.35-2ubuntu2.3
- 2:3.35-2ubuntu2.5
- 2:3.35-2ubuntu2.6
- 2:3.35-2ubuntu2.7
- 2:3.35-2ubuntu2.8
- 2:3.35-2ubuntu2.9
- 2:3.35-2ubuntu2.11
- 2:3.35-2ubuntu2.12
- 2:3.35-2ubuntu2.13
- 2:3.35-2ubuntu2.14
- 2:3.35-2ubuntu2.15
- 2:3.35-2ubuntu2.16
- 2:3.35-2ubuntu2.16+esm1
- 2:3.35-2ubuntu2.16+esm2
- Plages de versions concernées
- ECOSYSTEM: (−∞, +∞)
Aucun correctif publié
Sources originales
- http://www.securitytracker.com/id/1039153
- http://www.securityfocus.com/bid/100345
- http://www.geeknik.net/9brdqk6xu
- http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html
- http://seclists.org/fulldisclosure/2017/Aug/17
- https://security.gentoo.org/glsa/202003-37
- https://nvd.nist.gov/vuln/detail/CVE-2017-11696